Libslirp
Vendor:
First CVE: Jul 29, 2019 · Active for 6 years
13
Total CVEs
More Total CVEs than 92% of tracked products
4.3
Avg CVEs / Year
Higher CVE frequency than 88% of tracked products
5.5
Avg CVSS
Higher Avg CVSS than 18% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Libslirp over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 29, 2019
6 years ago
Most Recent CVE
Jun 15, 2021
1,869 days ago
CVE Severity & Scoring
Libslirp13 CVEs
31%
46%
23%
All CVEs353,240 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local6 (46.2%)
Network7 (53.8%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low11 (84.6%)
High2 (15.4%)
Unknown0 (0.0%)
User Interaction
None13 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low9 (69.2%)
High0 (0.0%)
None4 (30.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-14378HIGH ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment. | Jul 29, 2019 | 8.8 | 48 | NO | YES |
CVE-2019-15890HIGH libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. | Sep 6, 2019 | 7.5 | 26 | NO | NO |
CVE-2020-7211HIGH tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows. | Jan 21, 2020 | 7.5 | 24 | NO | NO |
CVE-2020-8608MEDIUM In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code. | Feb 6, 2020 | 5.6 | 22 | NO | NO |
CVE-2020-7039MEDIUM tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or ot | Jan 16, 2020 | 5.6 | 22 | NO | NO |
CVE-2020-1983MEDIUM A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service. | Apr 22, 2020 | 6.5 | 20 | NO | NO |
CVE-2020-29130MEDIUM slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. | Nov 26, 2020 | 4.3 | 18 | NO | NO |
CVE-2020-29129MEDIUM ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. | Nov 26, 2020 | 4.3 | 18 | NO | NO |
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a ud | Jun 15, 2021 | 3.8 | 17 | NO | NO |
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp | Jun 15, 2021 | 3.8 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
7.7% of CVEs· 86th percentile
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Libslirp
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.1.0 | 3 | 6.2 | 3.4% | 0 | 0 |
| 4.0.0 | 2 | 8.2 | 10.3% | 0 | 1 |